The management interface is the port through which the virtual appliance is managed and administered. It is also the port through which integration of the Central Management System appliance and a managed appliance is managed. With the single-port address type, the management interface is also the port through which a managed appliance requests and downloads software updates from the DTI network.
Initial settings need to be configured to set up the management interface, and to allow access to the network, change the default administrator password, and so on.
You can use the set_keys.ps1 PowerShell script provided in the deployment package .zip file to supply some initial settings for the appliance, including the activation code, a new password for the "admin" user, and initial CLI commands to configure the appliance. You can then log into the CLI of the virtual appliance and use the configuration wizard to complete the setup.
If you do not use the PowerShell script, you can use the virtual appliance console in Hyper-V Manager to type the activation code and commands that allow the admin to log in to the CLI or Web UI to configure the appliance. You can fully configure the appliance from the console, but it might be inconvenient because you cannot paste into the console.
Using the set_keys.ps1 PowerShell script
Trellix recommends that you use the set_keys.ps1 PowerShell script to do at least the following:
Enter the activation code for your virtual appliance. The activation code contains many characters. You cannot paste into the console, and it is easy to make a typing error.
Reset the password for the "admin" user if password authentication will be used to log into the CLI or Web UI over the network. The password must be changed to a password of at least eight characters.
You can also use this script to provide commands for configuration settings that the system will apply during the initial boot. This can be convenient if you have a large number of virtual appliances to deploy, because you can create base sets of commands and then customize them for each deployment.
set_keys.ps1 PowerShell script:Navigate to the directory where you extracted the deployment package
.zipfile.Locate the
set_keys.ps1file and open it in a text editor.Note
Alternatively, you can enter values when you run the script in the PowerShell ISE or PowerShell session described later in this procedure.
Change settings in the file by specifying your values within the quotation marks. The settings you can change are all located between the comments
MODIFY THESE AS NEEDEDandDON'T MODIFY ANYTHING BELOW. Do not change any other settings in the file.
The settings are described in the following table.
Field
Description
vmNameThe name of the virtual machine name you deployed. The name is displayed in the Virtual Machines section of Hyper-V Manager.
activation_codeThe code you received in a secure email from Trellix that gives the virtual appliance its identity and access credentials.
cli_cmds_initA set of commands that at a minimum allow the appliance to connect to your network. Type the commands in plain-text format and then paste the string into this field.
Consider using this field for network connectivity only, because the size of the string could become unwieldy.
cli_cmds_init_urlA URL that points to a file on your network (for example,
http://acme.com/operations/2500V_config.txt). To use this field, create a text file that contains CLI commands in plain-text format that configure additional settings, and store the file on an HTTP server in your network.The virtual appliance needs network connectivity (which the commands in the
cli_cmds_initfield can establish) to access the file referenced in the URL.reset_admin_passwordA password of at least eight characters. The initial admin password must be reset to allow the admin user to log into the CLI or Web UI over the network, unless both of the following are true:
The CLI commands being executed set an SSH authorized key for the admin user, which allows the admin to log in remotely without a password.
You disable password logins using the
username admin disable passwordcommand.
Save the file.
Do one of the following:
Open an administrator Windows PowerShell ISE session, select File > Open, and then navigate to and select set_keys.ps1.
Open an administrator Windows PowerShell session, navigate to the directory where you extracted the deployment package, and then run the
set_keys.ps1script.
Enter values in response to the prompts, or press Enter to leave a field blank.
Note
You will not be prompted for values you already provided in the
set_keys.ps1file.
Network Security wizard steps
The following table describes the questions the configuration wizard prompts you to answer. As noted in the table, the wizard skips some steps based on your answers to previous steps.
Note
Press Ctrl+C to exit the configuration wizard. After the management interface is configured, an administrator can use the configuration jump-start CLI command to run the wizard again.